File: SymbolizeDeadlock.cpp

package info (click to toggle)
llvm-toolchain-17 1%3A17.0.6-22
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 1,799,624 kB
  • sloc: cpp: 6,428,607; ansic: 1,383,196; asm: 793,408; python: 223,504; objc: 75,364; f90: 60,502; lisp: 33,869; pascal: 15,282; sh: 9,684; perl: 7,453; ml: 4,937; awk: 3,523; makefile: 2,889; javascript: 2,149; xml: 888; fortran: 619; cs: 573
file content (35 lines) | stat: -rw-r--r-- 1,091 bytes parent folder | download | duplicates (27)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
// See https://llvm.org/LICENSE.txt for license information.
// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception

// Tests that deadlocks do not occur when an OOM occurs during symbolization.

#include <cassert>
#include <cstdint>
#include <cstdio>
#include <cstdlib>
#include <cstring>

#include "Bingo.h"

volatile unsigned Sink = 0;

// Do not inline this function.  We want to trigger NEW_FUNC symbolization when
// libFuzzer finds this function.  We use a macro to make the name as long
// possible, hoping to increase the time spent in symbolization and increase the
// chances of triggering a deadlock.
__attribute__((noinline)) void BINGO() {
  // Busy work.  Inserts a delay here so the deadlock is more likely to trigger.
  for (unsigned i = 0; i < 330000000; i++) Sink += i;
}

extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
  assert(Data);
  if (Size < 3) return 0;
  if (Data[0] == 'F' &&
      Data[1] == 'U' &&
      Data[2] == 'Z')
    BINGO();
  return 0;
}